Assembly language POS malware found.
-
Tiny Malware, I originally found from an AlienVault Pulse.
I found this one interesting mostly because of how small it is, 5120 bytes. Yes, bytes. Less than 5k bytes! That's enough to verify the information being collected, and send it out to a command and control server via raw sockets and a very simple xor routine to keep IDS/IPS systems from picking up on the data being transferred.
-
Assembly programs give me nightmares, lol.
-
@dafyre said:
Assembly programs give me nightmares, lol.
I had an assembly language class in college. While I don't really enjoy it, I very much appreciate someone who does. Just... not.... this. It's a itty bitty little package of evil.
-
Some malware people are even using .NET these days, nobody cares about quality or good work anymore, +1 to the author of this software for taking the time and effort, -1 for it being malware.
-
@travisdh1 said:
@dafyre said:
Assembly programs give me nightmares, lol.
I had an assembly language class in college. While I don't really enjoy it, I very much appreciate someone who does. Just... not.... this. It's a itty bitty little package of evil.
This isn't meant to be offensive, but I've never met anyone who liked Assembly who was not at least border-line autistic. I think it's because it takes a certain type of mind or memory in order to deal with in an extended way and enjoy it. I can deal with it, but I don't really enjoy it. For smaller programs I'd rather use C and strip everything down... still won't be as small, but certainly better than any extra high level language.